Version Control Agent in DMZ

[Keith W]

I have the VC Repository running on my LAN with no problems.

I have just decided to roll the VC agent to the servers in my DMZ also.

I have opened ports 2381 and 161 outbound from the SIM to the Server in the DMZ but with no success.

It keeps saying it can't find the repository.

Any idea?

Are there other ports I need to open and in what direction?

[sandeep_raman]

Hello Keith,

ftp://ftp.compaq.com/pub/products/servers/management/hpsim/ManagingHPServers-withHPSIM.pdf
Pg 8

Configuration Management and Version Control.
Perhaps port 80

SRH

[Keith W]

Thanks

I've already seen that document, but am none th ewiser!

I have tried 80 also, and nothing.

[sandeep_raman]

Check if all these ports are allowed and does it make a difference?

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_CN0811W
(Ports to be Opened to the Firewall)

SRH

[Rich Purvis]

VC does not use port 80. You need port 2301 and 2381. HPSIM does it's System Management Homepage web app discovery on 2301. It does this in order to be backwards compatible with older versions of web applications that predate the use of 2381. Anyway - it will not discover any application that uses SMH, including Version Control unless it can talk on this port. Good luck,

-Rich

[Rich Purvis]

Hmmm - did you say only "outbound" from the HPSIM server to the DMZ. Version Control is not technically designed to "push" software out to servers. In reality, the VC Agents are designed to take "orders" from HPSIM and "pull" the software from the repository. If the VC Agents running on the servers in the DMZ cannot initiate a connection back through the firewall to the VCRM on port 2381, then it probably will not work.

-Rich

[JamesR_1]

Rich, VCA to VCR doesn't use 80, but status of VCA and tasks come from DMZ to CMS, yes?

Yeah, check the doc. 2381 will need to be opened from DMZ to LAN.